General

  • Target

    3455863240cd0be9ebb8e0de194eec8e_JaffaCakes118

  • Size

    811KB

  • Sample

    240511-nfnlragg96

  • MD5

    3455863240cd0be9ebb8e0de194eec8e

  • SHA1

    410c7354733d2f9f693551f7edf99196a512b21d

  • SHA256

    bf9a4934a9d9a4da3bdbe4846b2d662fb05da0b8361c1e5dd63ef019b42d5a9b

  • SHA512

    f0c5830aca68c5344b8d86a1609931f41fa8322d2850429cdff83fd5338110c1e7a40ad909463c2f16dec44b58fb18438314a2436709718bc47f93d574a45c34

  • SSDEEP

    12288:7b6mCM9sXHh9BoRPqsxOVKuS5r70xwgeqh043L97/hOILz2E2IBGB0n/yEOlRfmI:KeSHhYRRxOVGcxJBdb17SEVoB0G3uI

Malware Config

Extracted

Family

azorult

C2

http://ciuj.ir/gray/index.php

Targets

    • Target

      3455863240cd0be9ebb8e0de194eec8e_JaffaCakes118

    • Size

      811KB

    • MD5

      3455863240cd0be9ebb8e0de194eec8e

    • SHA1

      410c7354733d2f9f693551f7edf99196a512b21d

    • SHA256

      bf9a4934a9d9a4da3bdbe4846b2d662fb05da0b8361c1e5dd63ef019b42d5a9b

    • SHA512

      f0c5830aca68c5344b8d86a1609931f41fa8322d2850429cdff83fd5338110c1e7a40ad909463c2f16dec44b58fb18438314a2436709718bc47f93d574a45c34

    • SSDEEP

      12288:7b6mCM9sXHh9BoRPqsxOVKuS5r70xwgeqh043L97/hOILz2E2IBGB0n/yEOlRfmI:KeSHhYRRxOVGcxJBdb17SEVoB0G3uI

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks